Vidma is a Leader in blockchain
security audit

We have expertise across multiple DeFi protocols, layer one solutions, marketplaces, and more.

Request a Quote

Schedule a Call

2019

established

103

clients served

149

audits complited

Vidma focuses on ethereum virtual machine (EVM) ecosystems such as:

Layer 1

Layer 2

Our Key Security Services

Vidma specialists provide a range of security services to ensure the reputation and prosperity of your project. Safety comes first! Chose the service that suits your needs.

Smart Contract Audits

A Smart Contract Audit is required if you are about to release new product functionality, list your token on an exchange, or are ready to initiate a fundraising campaign. Our auditors will do a through review to certify your code. Your community, investors and partners can be confident the codebase is ready to provide safe operations and use.

Secure My Codebase!

Ongoing Code Review

Best match for projects in the active development stage and want to get cost and workflow optimization in sync with their development team. We are on call to review each significant change in your codebase and are charging for the amount of lines changed! Security services have never been easier or cheaper!

It's Time To Get Safe!

Penetration Testing

Penetration Testing will ensure that your environment is not vulnerable to various types of hacks and attacks. It is a "must" for wallets, exchanges, launchpads, marketplaces and other applications or platforms with rich interfaces and a high volume of funds flowing through the system or application.

Shield My Environment!

Our History Contributing To Your Safety

Back in 2019, we conducted our first smart contract audit. For the first 105 audits, our security experts worked under the brands of two partner companies. In 2022, after perfecting our expertise, Vidma was formed- we've done over 130 audits and counting.

Thanks to our professional team, techniques, and methods, we've managed to reveal plenty of security and operational issues with different severity levels. We've saved a day for a lot of projects and are proud to be ongoing security partners for many of them.

Below we've tracked the number of issues our team has found on all past projects.

149

Total amount of audits

103

Companies we worked with

1327

Total issues found

161

180

440

448

Critical

High

Medium

Low

Informational

Our latest smart contract Audits

They apply systems thinking to dynamically map out the influencing factors for each project. They establish relationships with partners who create added value and bring together the public and private sectors. They create cross-industry links for knowledge flows. They apply values that reinforce each other: socio-cultural value, experimental value, technical value, and economical value.

Score:

95.00

Check it out

Credit Unions, Cooperatives, and Individuals anywhere in the world can now earn higher interests in stable currencies on their savings.

Score:

99.00

Check it out

October 24, 2024

The RewardMechanism contract audit revealed vulnerabilities: 1 high, 4 medium, low, and informational. Improvements include ReentrancyGuard, SafeERC20 for secure transfers, and enhanced documentation.

Score:

96.30

Check it out

September 28, 2024

The contract now uses a multi-approver consensus mechanism for critical changes like adding/removing approvers and adjusting the quorum, enhancing its resistance to unauthorized alterations and attacks.

Score:

95.20

Check it out

Check All Audits

Our documents

These whitepapers dive deep into advanced security practices to fortify your decentralised applications.

Our documents

This whitepaper dives deep into advanced security practices to fortify your decentralized applications

Whitepaper

Version 1.0

Recent Hacks in blockchain world

Company

Crypto Bugs and Exploits

Lost

Mirror Protocol

May 28, 2022

On May 28th the exploit of Mirror Protocol has drained around $2M. Turns out it was not the only and not the first hack of the protocol.
‍
In October 2021, Mirror Protocol faced a $90M exploit which went unnoticed until last week.

$90M + $2M

FORTRESS PROTOCOL

May 8, 2022

The price submit() function was publicly callable, which made the protocol's price oracle was vulnerable.

The attacker was able to drain all assets from the platform using just 100 FTS (~4.5$ at pre-hack prices) as collateral.

Attacker’s address - 0xA6AF2872176320015f8ddB2ba013B38Cb35d22Ad

‍

$3M

Mad Meerkat Finance

May 4, 2022

Front-end side of the project was exploited. In the result, users swapping, adding or removing liquidity on the protocol had the output funds redirected straight into the attacker’s wallet.

It lasted around 3 hours, until the project team shut down the front-end. In discord they stated not to do anything with the website at that time.

"MM.finance site was the subject of a DNS attack earlier where an attacker managed to inject a malicious contract address into the frontend code. Attacker used a DNS vulnerability to modify the router contract address in our hosted files." - stated Mad Meerkat Finance team.
‍

Attacker’s address: https://cronoscan.com/address/0xb3065fe2125c413e973829108f23e872e1db9a6b

‍

~$2M